- 17 Nov, 2016 3 commits
-
-
Kamil Trzcinski authored
-
Kamil Trzcinski authored
-
Kamil Trzcinski authored
-
- 16 Nov, 2016 2 commits
-
-
Valery Sizov authored
-
Adam Niedzielski authored
-
- 15 Nov, 2016 4 commits
-
-
Robert Schilling authored
-
Dmitry Poray authored
-
Robert Schilling authored
-
Robert Schilling authored
-
- 14 Nov, 2016 9 commits
-
-
Francesco Coda Zabetta authored
-
Stan Hu authored
Steps to reproduce: 1. Start with a repo with an image 2. Add a commit to delete the image 3. Add another commit to replace the image with another image In a diff comparison, we really just compare about what the image was before the diff, not the direct parent of the last commit. This MR fixes that. Closes #3893, gitlab-org/gitlab-ee#678 Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
Francesco Coda Zabetta authored
-
Robert Schilling authored
-
Grzegorz Bizon authored
-
Robert Schilling authored
-
Robert Schilling authored
-
Grzegorz Bizon authored
-
Grzegorz Bizon authored
-
- 13 Nov, 2016 1 commit
-
-
Stan Hu authored
If the database has not been migrated properly, the initializer for Sidekiq will fail to start and cause the whole Rails server to crash. This change checks the existence for the column and allows Rails to start even if the setting has not been added as a database column. Closes #24452
-
- 12 Nov, 2016 2 commits
-
-
Rebeca Méndez authored
-
Vincent Composieux authored
Added ability to put emojis into repository name
-
- 11 Nov, 2016 2 commits
-
-
Drew Blessing authored
Centralize all LDAP config logic in `GitLab::LDAP::Config`. Previously, some logic was in the Devise initializer and it was not honoring the `user_filter`. If a user outside the configured `user_filter` signed in, an account would be created but they would then be denied access. Now that logic is centralized, the filter is honored and users outside the filter are never created.
-
Patricio Cano authored
-
- 10 Nov, 2016 9 commits
-
-
Drew Blessing authored
-
Patricio Cano authored
-
Patricio Cano authored
-
Patricio Cano authored
-
Adam Niedzielski authored
In this case comparing old_path and new_path is not enough because there are two entires that match.
-
Robert Schilling authored
-
Robert Schilling authored
-
Robert Schilling authored
-
Rémy Coutable authored
Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- 09 Nov, 2016 6 commits
-
-
Toon Claes authored
It adds a button to the branches page that the user can use to delete all the branches that are already merged. This can be used to clean up all the branches that were forgotten to delete while merging MRs. Fixes #21076.
-
Robert Schilling authored
-
Robert Speicher authored
Respect project visibility settings in the contributions calendar This MR fixes a number of bugs relating to access controls and date selection of events for the contributions calendar Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/23403 See merge request !2019 Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
Douwe Maan authored
Ensure external users are not able to clone disabled repositories. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/23788 See merge request !2017 Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
Douwe Maan authored
Fix for HackerOne XSS vulnerability in markdown This is an updated blacklist patch to fix https://dev.gitlab.org/gitlab/gitlabhq/merge_requests/2007. No text is removed. Dangerous schemes/protocols and invalid URIs are left intact but not linked. Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23153 See merge request !2015 Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
Douwe Maan authored
disable markdown in comments when referencing disabled features fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/23548 This MR prevents the following references when tool is disabled: - issues - snippets - commits - when repo is disabled - commit range - when repo is disabled - milestones This MR does not prevent references to repository files, since they are just markdown links and don't leak information. See merge request !2011 Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- 08 Nov, 2016 2 commits
-
-
Drew Blessing authored
It was previously possible for invalid credential errors to go unnoticed in this task. Users would believe everything was configured correctly and then sign in would fail with 'invalid credentials'. This adds a specific bind check, plus catches errors connecting to the server. Also, specs :)
-
Yatish Mehta authored
-